Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/8b023409-61ad-3e7c-a6f4-7ea5cb8925bb.roa
File:                     8b023409-61ad-3e7c-a6f4-7ea5cb8925bb.roa (raw, json)
Hash identifier:          dZDZ1SNYL1XqXCKsB6qhxBebzBX7yggd4SNU2qt+PM4=
Subject key identifier:   1D:3C:8A:A3:13:07:52:1F:D2:11:56:84:6C:96:4E:A9:3B:E4:16:FB
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F4328584B477C798FA68A5ED124EAB940
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/8b023409-61ad-3e7c-a6f4-7ea5cb8925bb.roa
Signing time:             Mon 22 Sep 2025 13:00:42 +0000
ROA not before:           Mon 22 Sep 2025 13:00:42 +0000
ROA not after:            Sun 21 Dec 2025 14:00:42 +0000
asID:                     14618
IP address blocks:        108.179.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:47:7c:79:8f:a6:8a:5e:d1:24:ea:b9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Sep 22 13:00:42 2025 GMT
            Not After : Dec 21 14:00:42 2025 GMT
        Subject: CN=a2ad22fd-4119-4684-b130-1bba12fb889c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a0:d3:3d:c2:48:b0:45:30:28:58:02:78:d0:
                    bf:7b:6a:6c:8b:70:82:32:7b:b8:ad:ec:d2:83:03:
                    3e:58:0c:31:d8:97:68:24:57:5e:66:db:ef:be:d9:
                    21:76:c3:7d:be:45:67:0f:40:42:51:1e:68:d9:a2:
                    2c:f3:5a:fc:bf:bd:ad:36:3e:99:09:7b:b5:a3:37:
                    f0:15:76:45:ed:98:18:d7:8e:4e:58:61:8c:c0:2d:
                    8c:04:e9:7a:2a:79:83:b6:02:61:d4:10:b6:d2:b6:
                    a3:6b:a7:79:f7:7e:f8:35:2c:07:b1:96:f6:37:8f:
                    f2:2f:4f:39:ae:2b:30:b8:58:6d:58:d9:24:89:63:
                    50:7c:52:63:aa:b2:d0:77:f8:e8:65:fe:9f:f3:0d:
                    31:b0:d8:7d:3d:f3:21:2e:1e:0e:f6:f2:26:d2:de:
                    1a:c2:40:25:89:6c:8b:fc:ba:bc:c6:44:dc:6b:bd:
                    c1:ee:d4:a6:71:15:aa:aa:52:0f:7c:37:4e:ce:a2:
                    6c:d3:42:72:31:4b:44:b1:07:ca:b8:0c:1f:d0:a1:
                    7f:cb:c0:8e:39:33:a1:e0:ea:94:86:61:27:70:b9:
                    8d:ca:e2:ee:cd:82:2b:bc:b4:78:be:41:3c:45:21:
                    d6:44:fa:5b:15:dc:02:48:5c:fc:76:63:d5:77:96:
                    36:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:3C:8A:A3:13:07:52:1F:D2:11:56:84:6C:96:4E:A9:3B:E4:16:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/8b023409-61ad-3e7c-a6f4-7ea5cb8925bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.179.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:21:b4:6a:da:e2:5e:10:96:d7:9c:99:87:67:8b:ee:c4:6c:
         22:4b:20:0b:18:43:d6:d0:ae:f1:07:55:ce:b0:35:c3:10:d5:
         03:d0:29:fd:9b:8b:5f:35:5d:76:2e:35:a3:7c:a9:0f:2a:76:
         58:47:f8:4b:00:48:40:53:32:b9:06:f4:82:12:57:f9:7b:dd:
         7c:4b:a4:45:ee:40:33:5b:c7:db:55:00:eb:06:5f:2f:26:fe:
         43:e4:8e:8d:5f:63:a7:bb:66:11:4a:84:a0:38:78:a6:11:9d:
         a3:b0:bb:3d:e9:43:f9:eb:79:4f:7c:4a:24:52:e8:4d:b6:90:
         f7:73:6b:c8:19:73:e9:a7:16:6b:ba:26:26:b5:28:5e:8f:b5:
         b7:03:14:e4:13:29:b1:d2:83:8f:d7:0f:50:f7:31:4f:37:2d:
         ea:6c:7a:77:da:85:40:db:8b:5b:76:8d:ff:e0:c5:a2:9d:3e:
         fe:f8:7f:d2:1a:6c:d6:65:69:25:9b:0d:45:56:ce:e0:df:37:
         19:d8:64:f9:57:a0:6a:c0:12:6b:86:c8:49:b2:5a:e9:58:02:
         a5:5b:0d:54:20:59:43:76:d9:ae:ab:cd:fa:89:90:b5:b4:f4:
         f3:f7:5c:ee:5d:85:ff:b0:0b:41:fa:e8:11:3b:bd:8e:77:df:
         23:89:3a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:20:40 2025 by rpki-client